04/20/2026 | Press release | Distributed by Public on 04/21/2026 09:00
20 Apr 2026
This document aims to explain the impacts and boundaries between the Cyber Resilience Act (EU) 2024/2847 (hereinafter, "the CRA") and its compliance with the legal framework for railway vehicle authorisation (Commission implementing regulation (EU) 2018/545 (hereinafter, "the PA VA") establishing practical arrangements for the railway vehicle authorisation process pursuant to Directive (EU) 2016/797 on the interoperability of the rail system within the European Union (hereinafter, "the IoD").
The annex outlines the distinct separation of cybersecurity compliance demonstration from the authorisation processes for railway vehicles.